p PatchFirst

CVE-2009-4762

CVE-2009-4762

This page contains facts from public vulnerability sources. Check the original advisory before updating.

MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603.

CVSS 7.5 · High · EPSS 3.1% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • moin PyPI

    Affected ranges
    • ECOSYSTEM: ≥ 1.7.0, < 1.7.3

    Update to 1.7.3

  • moin PyPI

    Affected ranges
    • ECOSYSTEM: ≥ 1.8.0, < 1.8.3

    Update to 1.8.3

  • moin PyPI

    Affected ranges
    • ECOSYSTEM: ≥ 1.7, < 1.7.3 ∪ ≥ 1.8, < 1.8.3

    Update to 1.7.3; Update to 1.8.3

Original sources

Check your server →